Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252011	7.5	危険	freelancerKit	-	freelancerKit における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1218	2012-02-22 16:15	2012-02-21	Show	GitHub Exploit DB Packet Storm

252012	4.3	警告	Zenphoto	-	Zenphoto におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0995	2012-02-22 16:12	2012-02-21	Show	GitHub Exploit DB Packet Storm

252013	6	警告	Zenphoto	-	Zenphoto の Manage Albums 機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0994	2012-02-22 16:09	2012-02-21	Show	GitHub Exploit DB Packet Storm

252014	6.8	警告	Zenphoto	-	Zenphoto の viewer_size_image.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0993	2012-02-22 16:07	2012-02-21	Show	GitHub Exploit DB Packet Storm

252015	4	警告	IBM	-	IBM solidDB のサーバにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0200	2012-02-22 15:31	2012-02-7	Show	GitHub Exploit DB Packet Storm

252016	4	警告	IBM	-	IBM solidDB のサーバにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4890	2012-02-22 15:30	2011-11-17	Show	GitHub Exploit DB Packet Storm

252017	4.3	警告	SIMHL	-	STHS v2 Web Portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1217	2012-02-22 15:24	2012-02-21	Show	GitHub Exploit DB Packet Storm

252018	6	警告	PBBoard	-	PBBoard の admin.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1216	2012-02-22 15:23	2012-02-21	Show	GitHub Exploit DB Packet Storm

252019	7.5	危険	Dolibarr ERP & CRM	-	Dolibarr CMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1226	2012-02-22 14:37	2012-02-21	Show	GitHub Exploit DB Packet Storm

252020	7.5	危険	Dolibarr ERP & CRM	-	Dolibarr CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1225	2012-02-22 14:35	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265151	9.8	CRITICAL Network	memcached	memcached	An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow a…	CWE-190 Integer Overflow or Wraparound	CVE-2016-8704	2024-11-21 11:59	2017-01-7	Show	GitHub Exploit DB Packet Storm

265152	3.3	LOW Local	foxitsoftware	reader	A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory …	CWE-125 Out-of-bounds Read	CVE-2016-8334	2024-11-21 11:59	2017-01-7	Show	GitHub Exploit DB Packet Storm

265153	9.8	CRITICAL Network	libgd	libgd	Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8670	2024-11-21 11:59	2017-01-5	Show	GitHub Exploit DB Packet Storm

265154	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular c…	CWE-787 Out-of-bounds Write	CVE-2016-8707	2024-11-21 11:59	2016-12-24	Show	GitHub Exploit DB Packet Storm

265155	5.5	MEDIUM Local	ffmpeg	ffmpeg	The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file.	CWE-20 Improper Input Validation	CVE-2016-8595	2024-11-21 11:59	2016-12-23	Show	GitHub Exploit DB Packet Storm

265156	8.8	HIGH Local	joyent	smartos	An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when de…	CWE-190 Integer Overflow or Wraparound	CVE-2016-8733	2024-11-21 11:59	2016-12-15	Show	GitHub Exploit DB Packet Storm

265157	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capabilit…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2016-8655	2024-11-21 11:59	2016-12-8	Show	GitHub Exploit DB Packet Storm

265158	7.5	HIGH Network	apache	http_server	The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to ca…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-8740	2024-11-21 11:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

265159	4.4	MEDIUM Local	lenovo	thinkpad_10_ella_2_bios thinkpad_11e_beema_bios thinkpad_11e_braswell_bios thinkpad_11e_broadwell_bios thinkpad_11e_skylake_bios thinkpad_13e_bios thinkpad_e450_bios thinkpad_e45…	A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mo…	CWE-284 Improper Access Control	CVE-2016-8222	2024-11-21 11:59	2016-12-1	Show	GitHub Exploit DB Packet Storm

265160	4.4	MEDIUM Local	lenovo	bios notebook_110_14ibr_bios notebook_110_15ibr_bios notebook_b70_80_bios notebook_e31_80_bios notebook_e40_80_bios notebook_e41_80_bios notebook_e51_80_bios notebook_g40_80_b…	A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Managem…	CWE-310 Cryptographic Issues	CVE-2016-8224	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed